IPsec and Nat

[stevent]

Is there any issues with setting up firewall/vpn on the same box using a cisco 1720. I heard a few stories about ipsec and nat. Will that cause any problems. I have an email server and webserver which i would like to make their services available to the outside world,(smtp and http) using nat.

[almazana]

I don not beleive that you can access those services from the outside with out static mappings through the NAT interface that is your connection to the outside world. In other words, you will have to place a one to one mapping similar to the way BSD handles NAT requests.

bimap tun0 192.168.1.1/32 -> 20.20.20.1/32

will accomplish the mapping for one host in Free/Open BSD. The IOS commands will be very similar in your configuration. Alex

[stevent]

But will i have any problem running one to one nat along with ipsec on the same device?

[dimurphy]

I'm not running the same device you're running. I have a Cisco2600 router with IPSec and NAT. I do use static NAT mappings. I have had not problems at all.